CVE-2016-3980 The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request, aka SAP Security Note 2259547.
HighCVSS 7.5
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request, aka SAP Security Note 2259547.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap application server java | >= 7.2, <= 7.4 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20160624 [ERPSCAN-16-018] SAP Application server for Javat - DoS vulnerability mailing-list third-party-advisory vdb-entry
- erpscan.io